larkin 0.4.21 → 0.4.22

package/dist/agent/agent-cli-capabilities.cjs

@@ -12,7 +12,7 @@ const internal_command_js_1 = require("../app/internal-command.cjs");
 exports.AGENT_CLI_CAPABILITIES = Object.freeze({
     version: 1,
     commands: Object.freeze({
-        inbox: Object.freeze(["check", "poll"]),
+        inbox: Object.freeze(["check", "poll", "audit"]),
         comment: Object.freeze(["reply"]),
         reminder: Object.freeze(["schedule", "list", "snooze", "update", "cancel", "log"]),
         interaction: Object.freeze(["callback-status", "callback-probe", "create", "get", "resolve"]),
@@ -31,7 +31,9 @@ function resolveAgentCliExecutable(cliPath, runtimeExecutable = node_process_1.d
 function agentCliPromptCapabilities(executable = "larkin") {
     const commands = Object.entries(exports.AGENT_CLI_CAPABILITIES.commands).flatMap(([group, operations]) => operations.map((operation) => ({
         command: `${group} ${operation}`,
-        purpose: group === "inbox" ? (operation === "check" ? "Read pending target summaries without consuming messages." : "Poll full messages and direct-ack the returned batch.") :
+        purpose: group === "inbox" ? (operation === "check" ? "Read pending target summaries without consuming messages."
+            : operation === "audit" ? "Read bounded observed group/topic audit targets and instructions."
+                : "Poll full messages and direct-ack the returned batch.") :
             group === "comment" ? "Reply once to the exact cloud-document comment bound by a polled Inbox message id." :
                 group === "reminder" ? "Manage this Agent's durable reminders." :
                     group === "interaction" ? "Create, inspect, or resolve a durable interactive card run." :

package/dist/agent/agent-cli-capabilities.mjs

@@ -4,7 +4,7 @@ import { INTERNAL_AGENT_CLI, internalCommandShell } from "../app/internal-comman
 export const AGENT_CLI_CAPABILITIES = Object.freeze({
     version: 1,
     commands: Object.freeze({
-        inbox: Object.freeze(["check", "poll"]),
+        inbox: Object.freeze(["check", "poll", "audit"]),
         comment: Object.freeze(["reply"]),
         reminder: Object.freeze(["schedule", "list", "snooze", "update", "cancel", "log"]),
         interaction: Object.freeze(["callback-status", "callback-probe", "create", "get", "resolve"]),
@@ -23,7 +23,9 @@ export function resolveAgentCliExecutable(cliPath, runtimeExecutable = process.e
 export function agentCliPromptCapabilities(executable = "larkin") {
     const commands = Object.entries(AGENT_CLI_CAPABILITIES.commands).flatMap(([group, operations]) => operations.map((operation) => ({
         command: `${group} ${operation}`,
-        purpose: group === "inbox" ? (operation === "check" ? "Read pending target summaries without consuming messages." : "Poll full messages and direct-ack the returned batch.") :
+        purpose: group === "inbox" ? (operation === "check" ? "Read pending target summaries without consuming messages."
+            : operation === "audit" ? "Read bounded observed group/topic audit targets and instructions."
+                : "Poll full messages and direct-ack the returned batch.") :
             group === "comment" ? "Reply once to the exact cloud-document comment bound by a polled Inbox message id." :
                 group === "reminder" ? "Manage this Agent's durable reminders." :
                     group === "interaction" ? "Create, inspect, or resolve a durable interactive card run." :

package/dist/agent/inbox-audit-heartbeat.cjs

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InboxAuditHeartbeat = exports.INBOX_AUDIT_CADENCE_MS = void 0;
+const inbox_projection_js_1 = require("./inbox-projection.cjs");
+exports.INBOX_AUDIT_CADENCE_MS = 15 * 60_000;
+/** One Host-owned timer fans a targetless internal wake to each active Agent. */
+class InboxAuditHeartbeat {
+    options;
+    timer = null;
+    running = false;
+    sequence = 0;
+    cadenceMs;
+    constructor(options) {
+        this.options = options;
+        this.cadenceMs = options.cadenceMs ?? exports.INBOX_AUDIT_CADENCE_MS;
+        if (!Number.isSafeInteger(this.cadenceMs) || this.cadenceMs < 1)
+            throw new Error("inbox audit cadence must be a positive integer");
+    }
+    start() {
+        if (this.running)
+            return;
+        this.running = true;
+        this.schedule();
+    }
+    stop() {
+        this.running = false;
+        if (this.timer)
+            (this.options.clearTimer ?? clearTimeout)(this.timer);
+        this.timer = null;
+    }
+    schedule() {
+        if (!this.running || this.timer)
+            return;
+        this.timer = (this.options.setTimer ?? setTimeout)(() => {
+            this.timer = null;
+            return this.fire().finally(() => { if (this.running)
+                this.schedule(); });
+        }, this.cadenceMs);
+        this.timer.unref?.();
+    }
+    async fire() {
+        const now = this.options.now ?? Date.now;
+        for (const agent of this.options.agents) {
+            const message_id = `rem_inbox_audit_${now()}_${++this.sequence}_${agent.agentId}`;
+            const envelope = {
+                kind: "reminder",
+                message_id,
+                target: inbox_projection_js_1.RUNTIME_REMINDER_TARGET,
+                wake: true,
+                content: "Internal inbox audit wake. Poll runtime:reminder, then run larkin inbox audit --json. No finding stays silent.",
+            };
+            try {
+                const appended = this.options.stateStore(agent).appendCanonicalInboxOnce(envelope);
+                if (appended.status === "appended")
+                    await this.options.runtimeHost.deliver(agent.agentId, appended.envelope);
+            }
+            catch (error) {
+                this.options.log?.(`inbox audit heartbeat failed agent=${agent.agentId}: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+    }
+}
+exports.InboxAuditHeartbeat = InboxAuditHeartbeat;

package/dist/agent/inbox-audit-heartbeat.mjs

@@ -0,0 +1,59 @@
+import { RUNTIME_REMINDER_TARGET } from "./inbox-projection.mjs";
+export const INBOX_AUDIT_CADENCE_MS = 15 * 60_000;
+/** One Host-owned timer fans a targetless internal wake to each active Agent. */
+export class InboxAuditHeartbeat {
+    options;
+    timer = null;
+    running = false;
+    sequence = 0;
+    cadenceMs;
+    constructor(options) {
+        this.options = options;
+        this.cadenceMs = options.cadenceMs ?? INBOX_AUDIT_CADENCE_MS;
+        if (!Number.isSafeInteger(this.cadenceMs) || this.cadenceMs < 1)
+            throw new Error("inbox audit cadence must be a positive integer");
+    }
+    start() {
+        if (this.running)
+            return;
+        this.running = true;
+        this.schedule();
+    }
+    stop() {
+        this.running = false;
+        if (this.timer)
+            (this.options.clearTimer ?? clearTimeout)(this.timer);
+        this.timer = null;
+    }
+    schedule() {
+        if (!this.running || this.timer)
+            return;
+        this.timer = (this.options.setTimer ?? setTimeout)(() => {
+            this.timer = null;
+            return this.fire().finally(() => { if (this.running)
+                this.schedule(); });
+        }, this.cadenceMs);
+        this.timer.unref?.();
+    }
+    async fire() {
+        const now = this.options.now ?? Date.now;
+        for (const agent of this.options.agents) {
+            const message_id = `rem_inbox_audit_${now()}_${++this.sequence}_${agent.agentId}`;
+            const envelope = {
+                kind: "reminder",
+                message_id,
+                target: RUNTIME_REMINDER_TARGET,
+                wake: true,
+                content: "Internal inbox audit wake. Poll runtime:reminder, then run larkin inbox audit --json. No finding stays silent.",
+            };
+            try {
+                const appended = this.options.stateStore(agent).appendCanonicalInboxOnce(envelope);
+                if (appended.status === "appended")
+                    await this.options.runtimeHost.deliver(agent.agentId, appended.envelope);
+            }
+            catch (error) {
+                this.options.log?.(`inbox audit heartbeat failed agent=${agent.agentId}: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+    }
+}

package/dist/agent/missed-outbound-scan.cjs

@@ -1,123 +1,133 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_MISSED_OUTBOUND_REPEAT = exports.DEFAULT_MISSED_OUTBOUND_TITLE = void 0;
-exports.parseOmMessageId = parseOmMessageId;
-exports.parseScanDeliveryTarget = parseScanDeliveryTarget;
-exports.isDefaultMissedOutboundReminder = isDefaultMissedOutboundReminder;
-exports.ensureDefaultMissedOutboundScanReminder = ensureDefaultMissedOutboundScanReminder;
-exports.persistInboundScanTarget = persistInboundScanTarget;
-const node_path_1 = __importDefault(require("node:path"));
-const reminder_store_js_1 = require("./reminder-store.cjs");
-exports.DEFAULT_MISSED_OUTBOUND_TITLE = "Read scoped history from this reminder envelope's persisted deliveryTarget (chat: +chat-messages-list; thread: +threads-messages-list). Judge unanswered asks, undelivered follow-ups, and stalled work. On a hit, post a short status in the same conversation using that persisted deliveryTarget/anchor; otherwise stay silent. Never infer recipients from the title.";
-exports.DEFAULT_MISSED_OUTBOUND_REPEAT = "every:15m";
-const CHAT_TARGET = /^chat:(oc_[A-Za-z0-9]+)$/;
-const THREAD_TARGET = /^thread:(oc_[A-Za-z0-9]+):(omt_[A-Za-z0-9]+)$/;
-const OM_ID = /^om_[A-Za-z0-9]+$/;
-function parseOmMessageId(value, label = "message-id") {
-    const id = String(value || "").trim();
-    if (!OM_ID.test(id))
-        throw new Error(`${label} 必须是严格 om_ 语法`);
-    return id;
-}
-function parseScanDeliveryTarget(target, anchor) {
-    const deliveryTarget = String(target || "").trim();
-    if (!deliveryTarget) {
-        throw new Error("user-facing reminder 必须显式指定 delivery target，不得从标题推断收件人");
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
     }
-    const chat = deliveryTarget.match(CHAT_TARGET);
-    if (chat) {
-        return {
-            deliveryTarget,
-            scope: "chat",
-            chatId: chat[1],
-            threadId: null,
-            deliveryAnchor: anchor ? parseOmMessageId(anchor, "delivery anchor") : null,
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
         };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_INBOX_AUDIT_TARGETS = exports.INBOX_AUDIT_LEGACY_MIGRATION_NON_GOAL = void 0;
+exports.inboxAuditRegistryFile = inboxAuditRegistryFile;
+exports.observeInboxAuditTarget = observeInboxAuditTarget;
+exports.readInboxAuditTargets = readInboxAuditTargets;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+/**
+ * #169's host-owned heartbeat no longer creates per-target missed-outbound loops.
+ * Pre-v0.4.21 records have no unique ownership marker and can collide exactly
+ * with user reminders, so existing indistinguishable loops are never migrated
+ * or deleted automatically.
+ */
+exports.INBOX_AUDIT_LEGACY_MIGRATION_NON_GOAL = "New versions no longer create missed-outbound loops; existing indistinguishable historical loops are not migrated or deleted automatically.";
+// Audits return every retained target. Storage remains bounded so a heartbeat
+// cannot accumulate an unbounded work list.
+exports.MAX_INBOX_AUDIT_TARGETS = 96;
+const MAX_STORED_TARGETS = exports.MAX_INBOX_AUDIT_TARGETS;
+const CHAT = /^oc_[A-Za-z0-9]+$/;
+const THREAD = /^omt_[A-Za-z0-9]+$/;
+const ANCHOR = /^om_[A-Za-z0-9_-]+$/;
+function inboxAuditRegistryFile(larkinHome) {
+    return path.join(larkinHome, "inbox-audit.json");
+}
+function parseTarget(event) {
+    const chatId = String(event.chat_id || "");
+    const threadId = event.thread_id ? String(event.thread_id) : "";
+    const anchor = String(event.message_id || "");
+    if (!CHAT.test(chatId) || !ANCHOR.test(anchor) || (threadId && !THREAD.test(threadId)))
+        return null;
+    return { target: threadId ? `thread:${chatId}:${threadId}` : `chat:${chatId}`, anchor };
+}
+function load(file) {
+    let value;
+    try {
+        value = JSON.parse(fs.readFileSync(file, "utf8"));
     }
-    const thread = deliveryTarget.match(THREAD_TARGET);
-    if (thread) {
-        return {
-            deliveryTarget,
-            scope: "thread",
-            chatId: thread[1],
-            threadId: thread[2],
-            deliveryAnchor: parseOmMessageId(anchor, "delivery anchor"),
-        };
+    catch (error) {
+        if (error.code === "ENOENT")
+            return { version: 1, targets: [] };
+        throw error;
     }
-    throw new Error("delivery target 必须是 chat:oc_… 或 thread:oc_…:omt_…，禁止推断 DM");
+    if (value?.version !== 1 || !Array.isArray(value.targets))
+        return { version: 1, targets: [] };
+    return { version: 1, targets: value.targets.flatMap((row) => {
+            if (!row || typeof row !== "object")
+                return [];
+            const candidate = row;
+            if (typeof candidate.target !== "string" || typeof candidate.anchor !== "string")
+                return [];
+            const parsed = parseTarget({
+                chat_id: candidate.target.startsWith("chat:") ? candidate.target.slice(5) : candidate.target.split(":")[1],
+                thread_id: candidate.target.startsWith("thread:") ? candidate.target.split(":")[2] : null,
+                message_id: candidate.anchor,
+            });
+            return typeof candidate.agent_id === "string" && candidate.agent_id && parsed && candidate.target === parsed.target
+                && typeof candidate.observed_at === "string" && Number.isFinite(Date.parse(candidate.observed_at))
+                ? [{ agent_id: candidate.agent_id, ...parsed, observed_at: candidate.observed_at }] : [];
+        }) };
 }
-function isDefaultMissedOutboundReminder(reminder) {
-    return reminder?.title === exports.DEFAULT_MISSED_OUTBOUND_TITLE
-        && reminder.repeat === exports.DEFAULT_MISSED_OUTBOUND_REPEAT
-        && reminder.deliveryMode === "user"
-        && reminder.status === "scheduled";
+function save(file, registry) {
+    fs.mkdirSync(path.dirname(file), { recursive: true, mode: 0o700 });
+    const temporary = path.join(path.dirname(file), `.${path.basename(file)}.${process.pid}.${Date.now()}.tmp`);
+    fs.writeFileSync(temporary, `${JSON.stringify(registry)}\n`, { mode: 0o600 });
+    fs.renameSync(temporary, file);
+    fs.chmodSync(file, 0o600);
 }
-function ensureDefaultMissedOutboundScanReminder(input) {
-    const parsed = parseScanDeliveryTarget(input.deliveryTarget, input.deliveryAnchor);
-    const recurrence = (0, reminder_store_js_1.parseRepeat)(exports.DEFAULT_MISSED_OUTBOUND_REPEAT);
-    if ("error" in recurrence)
-        throw new Error(recurrence.error);
-    const now = input.nowMs ?? Date.now();
-    const wantedAnchor = parsed.deliveryAnchor;
-    return (0, reminder_store_js_1.mutate)(input.storeFile, (store) => {
-        const sameIdentity = (reminder) => reminder.ownerAgentId === input.agentId
-            && reminder.title === exports.DEFAULT_MISSED_OUTBOUND_TITLE
-            && reminder.repeat === exports.DEFAULT_MISSED_OUTBOUND_REPEAT
-            && reminder.deliveryMode === "user"
-            && reminder.deliveryTarget === parsed.deliveryTarget;
-        const scheduled = store.reminders.find((reminder) => sameIdentity(reminder) && reminder.status === "scheduled");
-        if (scheduled) {
-            if ((scheduled.deliveryAnchor || null) !== wantedAnchor)
-                scheduled.deliveryAnchor = wantedAnchor;
-            return { created: false, reminderId: scheduled.reminderId, rebuilt: false };
-        }
-        const canceled = store.reminders.find((reminder) => sameIdentity(reminder) && reminder.status === "canceled");
-        if (canceled)
-            return { created: false, reminderId: canceled.reminderId, rebuilt: false };
-        const hadFired = store.reminders.some((reminder) => sameIdentity(reminder) && reminder.status === "fired");
-        store.reminders = store.reminders.filter((reminder) => !(sameIdentity(reminder) && reminder.status === "fired"));
-        const reminderId = (0, reminder_store_js_1.newId)();
-        store.reminders.push({
-            reminderId,
-            ownerAgentId: input.agentId,
-            title: exports.DEFAULT_MISSED_OUTBOUND_TITLE,
-            fireAt: (0, reminder_store_js_1.nowIso)(now + 15 * 60_000),
-            firedAt: null,
-            createdAt: (0, reminder_store_js_1.nowIso)(now),
-            status: "scheduled",
-            version: 1,
-            events: [],
-            deliveryTarget: parsed.deliveryTarget,
-            deliveryAnchor: wantedAnchor,
-            deliveryMode: "user",
-            repeat: exports.DEFAULT_MISSED_OUTBOUND_REPEAT,
-        });
-        return { created: true, reminderId, rebuilt: hadFired };
-    });
+/** Record only an authoritative human group/topic source; DMs and bots are ignored. */
+function observeInboxAuditTarget(file, agentId, event, now = new Date()) {
+    if (event._scan_authority !== true || event._sender_is_bot !== false || event.chat_type !== "group")
+        return false;
+    const parsed = parseTarget(event);
+    if (!parsed)
+        return false;
+    const registry = load(file);
+    const observed_at = now.toISOString();
+    registry.targets = registry.targets.filter((row) => row.agent_id !== agentId || row.target !== parsed.target);
+    registry.targets.unshift({ agent_id: agentId, ...parsed, observed_at });
+    registry.targets = registry.targets.slice(0, MAX_STORED_TARGETS);
+    save(file, registry);
+    return true;
 }
-function persistInboundScanTarget(stateDir, event, agentId, storeFile = node_path_1.default.join(stateDir, "reminders.json")) {
-    if (event._sender_is_bot)
-        throw new Error("scan reminder 只接受 human inbound");
-    if (event._scan_authority !== true)
-        throw new Error("scan reminder 需要权威 chatType/senderIsBot");
-    if (event.chat_type !== "group")
-        throw new Error("scan reminder 只接受 group/thread，禁止 DM");
-    const chatId = String(event.chat_id || "");
-    if (!/^oc_[A-Za-z0-9]+$/.test(chatId)) {
-        throw new Error("user-facing reminder 必须显式指定 delivery target，不得从标题推断收件人");
-    }
-    const threadId = event.thread_id ? String(event.thread_id) : "";
-    const parsed = threadId
-        ? parseScanDeliveryTarget(`thread:${chatId}:${threadId}`, event.message_id)
-        : parseScanDeliveryTarget(`chat:${chatId}`, event.message_id || null);
-    ensureDefaultMissedOutboundScanReminder({
-        storeFile,
-        agentId,
-        deliveryTarget: parsed.deliveryTarget,
-        deliveryAnchor: parsed.deliveryAnchor,
-    });
-    return parsed;
+function instruction(target) {
+    const history = target.target.startsWith("thread:")
+        ? "Use larkin im +threads-messages-list for this exact thread."
+        : "Use larkin im +chat-messages-list for this exact chat.";
+    return `${history} If a real missed outbound finding requires a response, use the existing guarded larkin im reply path anchored at ${target.anchor}; otherwise stay silent.`;
+}
+/** Content-free, bounded audit work list consumed by the Agent CLI. */
+function readInboxAuditTargets(file, agentId) {
+    const rows = load(file).targets.filter((row) => row.agent_id === agentId)
+        .sort((left, right) => right.observed_at.localeCompare(left.observed_at));
+    return {
+        version: 1,
+        targets: rows.slice(0, exports.MAX_INBOX_AUDIT_TARGETS).map(({ agent_id: _agentId, ...target }) => ({ ...target, instruction: instruction(target) })),
+        has_more: rows.length > exports.MAX_INBOX_AUDIT_TARGETS,
+        no_finding: "stay_silent",
+    };
 }

package/dist/agent/missed-outbound-scan.mjs

@@ -1,112 +1,94 @@
-import path from "node:path";
-import { mutate, newId, nowIso, parseRepeat } from "./reminder-store.mjs";
-export const DEFAULT_MISSED_OUTBOUND_TITLE = "Read scoped history from this reminder envelope's persisted deliveryTarget (chat: +chat-messages-list; thread: +threads-messages-list). Judge unanswered asks, undelivered follow-ups, and stalled work. On a hit, post a short status in the same conversation using that persisted deliveryTarget/anchor; otherwise stay silent. Never infer recipients from the title.";
-export const DEFAULT_MISSED_OUTBOUND_REPEAT = "every:15m";
-const CHAT_TARGET = /^chat:(oc_[A-Za-z0-9]+)$/;
-const THREAD_TARGET = /^thread:(oc_[A-Za-z0-9]+):(omt_[A-Za-z0-9]+)$/;
-const OM_ID = /^om_[A-Za-z0-9]+$/;
-export function parseOmMessageId(value, label = "message-id") {
-    const id = String(value || "").trim();
-    if (!OM_ID.test(id))
-        throw new Error(`${label} 必须是严格 om_ 语法`);
-    return id;
+import * as fs from "node:fs";
+import * as path from "node:path";
+/**
+ * #169's host-owned heartbeat no longer creates per-target missed-outbound loops.
+ * Pre-v0.4.21 records have no unique ownership marker and can collide exactly
+ * with user reminders, so existing indistinguishable loops are never migrated
+ * or deleted automatically.
+ */
+export const INBOX_AUDIT_LEGACY_MIGRATION_NON_GOAL = "New versions no longer create missed-outbound loops; existing indistinguishable historical loops are not migrated or deleted automatically.";
+// Audits return every retained target. Storage remains bounded so a heartbeat
+// cannot accumulate an unbounded work list.
+export const MAX_INBOX_AUDIT_TARGETS = 96;
+const MAX_STORED_TARGETS = MAX_INBOX_AUDIT_TARGETS;
+const CHAT = /^oc_[A-Za-z0-9]+$/;
+const THREAD = /^omt_[A-Za-z0-9]+$/;
+const ANCHOR = /^om_[A-Za-z0-9_-]+$/;
+export function inboxAuditRegistryFile(larkinHome) {
+    return path.join(larkinHome, "inbox-audit.json");
 }
-export function parseScanDeliveryTarget(target, anchor) {
-    const deliveryTarget = String(target || "").trim();
-    if (!deliveryTarget) {
-        throw new Error("user-facing reminder 必须显式指定 delivery target，不得从标题推断收件人");
-    }
-    const chat = deliveryTarget.match(CHAT_TARGET);
-    if (chat) {
-        return {
-            deliveryTarget,
-            scope: "chat",
-            chatId: chat[1],
-            threadId: null,
-            deliveryAnchor: anchor ? parseOmMessageId(anchor, "delivery anchor") : null,
-        };
+function parseTarget(event) {
+    const chatId = String(event.chat_id || "");
+    const threadId = event.thread_id ? String(event.thread_id) : "";
+    const anchor = String(event.message_id || "");
+    if (!CHAT.test(chatId) || !ANCHOR.test(anchor) || (threadId && !THREAD.test(threadId)))
+        return null;
+    return { target: threadId ? `thread:${chatId}:${threadId}` : `chat:${chatId}`, anchor };
+}
+function load(file) {
+    let value;
+    try {
+        value = JSON.parse(fs.readFileSync(file, "utf8"));
     }
-    const thread = deliveryTarget.match(THREAD_TARGET);
-    if (thread) {
-        return {
-            deliveryTarget,
-            scope: "thread",
-            chatId: thread[1],
-            threadId: thread[2],
-            deliveryAnchor: parseOmMessageId(anchor, "delivery anchor"),
-        };
+    catch (error) {
+        if (error.code === "ENOENT")
+            return { version: 1, targets: [] };
+        throw error;
     }
-    throw new Error("delivery target 必须是 chat:oc_… 或 thread:oc_…:omt_…，禁止推断 DM");
+    if (value?.version !== 1 || !Array.isArray(value.targets))
+        return { version: 1, targets: [] };
+    return { version: 1, targets: value.targets.flatMap((row) => {
+            if (!row || typeof row !== "object")
+                return [];
+            const candidate = row;
+            if (typeof candidate.target !== "string" || typeof candidate.anchor !== "string")
+                return [];
+            const parsed = parseTarget({
+                chat_id: candidate.target.startsWith("chat:") ? candidate.target.slice(5) : candidate.target.split(":")[1],
+                thread_id: candidate.target.startsWith("thread:") ? candidate.target.split(":")[2] : null,
+                message_id: candidate.anchor,
+            });
+            return typeof candidate.agent_id === "string" && candidate.agent_id && parsed && candidate.target === parsed.target
+                && typeof candidate.observed_at === "string" && Number.isFinite(Date.parse(candidate.observed_at))
+                ? [{ agent_id: candidate.agent_id, ...parsed, observed_at: candidate.observed_at }] : [];
+        }) };
 }
-export function isDefaultMissedOutboundReminder(reminder) {
-    return reminder?.title === DEFAULT_MISSED_OUTBOUND_TITLE
-        && reminder.repeat === DEFAULT_MISSED_OUTBOUND_REPEAT
-        && reminder.deliveryMode === "user"
-        && reminder.status === "scheduled";
+function save(file, registry) {
+    fs.mkdirSync(path.dirname(file), { recursive: true, mode: 0o700 });
+    const temporary = path.join(path.dirname(file), `.${path.basename(file)}.${process.pid}.${Date.now()}.tmp`);
+    fs.writeFileSync(temporary, `${JSON.stringify(registry)}\n`, { mode: 0o600 });
+    fs.renameSync(temporary, file);
+    fs.chmodSync(file, 0o600);
 }
-export function ensureDefaultMissedOutboundScanReminder(input) {
-    const parsed = parseScanDeliveryTarget(input.deliveryTarget, input.deliveryAnchor);
-    const recurrence = parseRepeat(DEFAULT_MISSED_OUTBOUND_REPEAT);
-    if ("error" in recurrence)
-        throw new Error(recurrence.error);
-    const now = input.nowMs ?? Date.now();
-    const wantedAnchor = parsed.deliveryAnchor;
-    return mutate(input.storeFile, (store) => {
-        const sameIdentity = (reminder) => reminder.ownerAgentId === input.agentId
-            && reminder.title === DEFAULT_MISSED_OUTBOUND_TITLE
-            && reminder.repeat === DEFAULT_MISSED_OUTBOUND_REPEAT
-            && reminder.deliveryMode === "user"
-            && reminder.deliveryTarget === parsed.deliveryTarget;
-        const scheduled = store.reminders.find((reminder) => sameIdentity(reminder) && reminder.status === "scheduled");
-        if (scheduled) {
-            if ((scheduled.deliveryAnchor || null) !== wantedAnchor)
-                scheduled.deliveryAnchor = wantedAnchor;
-            return { created: false, reminderId: scheduled.reminderId, rebuilt: false };
-        }
-        const canceled = store.reminders.find((reminder) => sameIdentity(reminder) && reminder.status === "canceled");
-        if (canceled)
-            return { created: false, reminderId: canceled.reminderId, rebuilt: false };
-        const hadFired = store.reminders.some((reminder) => sameIdentity(reminder) && reminder.status === "fired");
-        store.reminders = store.reminders.filter((reminder) => !(sameIdentity(reminder) && reminder.status === "fired"));
-        const reminderId = newId();
-        store.reminders.push({
-            reminderId,
-            ownerAgentId: input.agentId,
-            title: DEFAULT_MISSED_OUTBOUND_TITLE,
-            fireAt: nowIso(now + 15 * 60_000),
-            firedAt: null,
-            createdAt: nowIso(now),
-            status: "scheduled",
-            version: 1,
-            events: [],
-            deliveryTarget: parsed.deliveryTarget,
-            deliveryAnchor: wantedAnchor,
-            deliveryMode: "user",
-            repeat: DEFAULT_MISSED_OUTBOUND_REPEAT,
-        });
-        return { created: true, reminderId, rebuilt: hadFired };
-    });
+/** Record only an authoritative human group/topic source; DMs and bots are ignored. */
+export function observeInboxAuditTarget(file, agentId, event, now = new Date()) {
+    if (event._scan_authority !== true || event._sender_is_bot !== false || event.chat_type !== "group")
+        return false;
+    const parsed = parseTarget(event);
+    if (!parsed)
+        return false;
+    const registry = load(file);
+    const observed_at = now.toISOString();
+    registry.targets = registry.targets.filter((row) => row.agent_id !== agentId || row.target !== parsed.target);
+    registry.targets.unshift({ agent_id: agentId, ...parsed, observed_at });
+    registry.targets = registry.targets.slice(0, MAX_STORED_TARGETS);
+    save(file, registry);
+    return true;
 }
-export function persistInboundScanTarget(stateDir, event, agentId, storeFile = path.join(stateDir, "reminders.json")) {
-    if (event._sender_is_bot)
-        throw new Error("scan reminder 只接受 human inbound");
-    if (event._scan_authority !== true)
-        throw new Error("scan reminder 需要权威 chatType/senderIsBot");
-    if (event.chat_type !== "group")
-        throw new Error("scan reminder 只接受 group/thread，禁止 DM");
-    const chatId = String(event.chat_id || "");
-    if (!/^oc_[A-Za-z0-9]+$/.test(chatId)) {
-        throw new Error("user-facing reminder 必须显式指定 delivery target，不得从标题推断收件人");
-    }
-    const threadId = event.thread_id ? String(event.thread_id) : "";
-    const parsed = threadId
-        ? parseScanDeliveryTarget(`thread:${chatId}:${threadId}`, event.message_id)
-        : parseScanDeliveryTarget(`chat:${chatId}`, event.message_id || null);
-    ensureDefaultMissedOutboundScanReminder({
-        storeFile,
-        agentId,
-        deliveryTarget: parsed.deliveryTarget,
-        deliveryAnchor: parsed.deliveryAnchor,
-    });
-    return parsed;
+function instruction(target) {
+    const history = target.target.startsWith("thread:")
+        ? "Use larkin im +threads-messages-list for this exact thread."
+        : "Use larkin im +chat-messages-list for this exact chat.";
+    return `${history} If a real missed outbound finding requires a response, use the existing guarded larkin im reply path anchored at ${target.anchor}; otherwise stay silent.`;
+}
+/** Content-free, bounded audit work list consumed by the Agent CLI. */
+export function readInboxAuditTargets(file, agentId) {
+    const rows = load(file).targets.filter((row) => row.agent_id === agentId)
+        .sort((left, right) => right.observed_at.localeCompare(left.observed_at));
+    return {
+        version: 1,
+        targets: rows.slice(0, MAX_INBOX_AUDIT_TARGETS).map(({ agent_id: _agentId, ...target }) => ({ ...target, instruction: instruction(target) })),
+        has_more: rows.length > MAX_INBOX_AUDIT_TARGETS,
+        no_finding: "stay_silent",
+    };
 }

package/dist/app/agent-cli.mjs

@@ -7,6 +7,7 @@ import * as path from "node:path";
 import { createAgentStateStore } from "../agent/agent-state-store.mjs";
 import * as larkinConfig from "../platform/config.mjs";
 import { projectInboxCheck, projectInboxEvents } from "../agent/inbox-projection.mjs";
+import { inboxAuditRegistryFile, readInboxAuditTargets } from "../agent/missed-outbound-scan.mjs";
 import { createReminderRoutes } from "../agent/reminder-routes.mjs";
 import { InteractionStateMachine } from "../agent/interaction-state-machine.mjs";
 import { issueCallbackProbe, readCallbackCapability } from "../platform/callback-capability.mjs";
@@ -501,10 +502,17 @@ export function runAgentCli(argv, env = process.env, dependencies = {}) {
         const { config, agent } = requireAgent(env);
         const stateStore = dependencies.stateStore ?? createAgentStateStore(config.larkinHome, agent.agentId);
         if (group === "inbox") {
-            if (!["check", "poll"].includes(subcommand || "")) {
-                throw new Error("inbox 只支持 `larkin inbox check` 与 `larkin inbox poll`");
+            if (!["check", "poll", "audit"].includes(subcommand || "")) {
+                throw new Error("inbox 只支持 `larkin inbox check`、`larkin inbox poll` 与 `larkin inbox audit`");
             }
             const options = parseOptions(rest, new Set(["--json"]));
+            if (subcommand === "audit") {
+                if (options.positionals.length || options.values.size || options.booleans.size > 1) {
+                    throw new Error("inbox audit 只接受 --json");
+                }
+                emitJson(io, readInboxAuditTargets(inboxAuditRegistryFile(config.larkinHome), agent.agentId));
+                return 0;
+            }
             if (options.positionals.length || [...options.values.keys()].some((flag) => !["--target", "--limit"].includes(flag))) {
                 throw new Error(`inbox ${subcommand} 只接受 --target、${subcommand === "poll" ? "--limit、" : ""}--json`);
             }

package/dist/feishu/host-shell.cjs

@@ -51,6 +51,7 @@ const host_business_state_js_1 = require("./host-business-state.cjs");
 const host_processing_eye_js_1 = require("./host-processing-eye.cjs");
 const inbox_projection_js_1 = require("../agent/inbox-projection.cjs");
 const host_reminder_orchestrator_js_1 = require("../agent/host-reminder-orchestrator.cjs");
+const inbox_audit_heartbeat_js_1 = require("../agent/inbox-audit-heartbeat.cjs");
 const missed_outbound_scan_js_1 = require("../agent/missed-outbound-scan.cjs");
 const host_channel_business_js_1 = require("./host-channel-business.cjs");
 const interaction_orchestrator_js_1 = require("./interaction-orchestrator.cjs");
@@ -340,6 +341,13 @@ function createHostShell({ env = process.env, runtimeHost, channelPackage, event
     for (const agent of agents)
         prepareAgentState(agent);
     const reminder = new host_reminder_orchestrator_js_1.HostReminderOrchestrator({ agents, stateStore, envelopeProjector, deliveryTarget: runtimeHost, log });
+    const inboxAudit = new inbox_audit_heartbeat_js_1.InboxAuditHeartbeat({
+        agents,
+        stateStore,
+        runtimeHost,
+        log,
+    });
+    const auditRegistry = (0, missed_outbound_scan_js_1.inboxAuditRegistryFile)(larkinHome);
     const seenEventIds = new Set();
     const inFlightEventIds = new Set();
     const onFeishuMessage = async (agent, event, options) => {
@@ -386,13 +394,11 @@ function createHostShell({ env = process.env, runtimeHost, channelPackage, event
                 // append/dedupe decision is durable. Agent model-seen state is untouched.
                 if (event.event_id)
                     seenEventIds.add(eventKey);
-                if (!event._sender_is_bot && event._scan_authority) {
-                    try {
-                        (0, missed_outbound_scan_js_1.persistInboundScanTarget)(agent.stateDir, event, agent.agentId);
-                    }
-                    catch (error) {
-                        log(`inbound scan target 未持久化: ${error.message}`);
-                    }
+                try {
+                    (0, missed_outbound_scan_js_1.observeInboxAuditTarget)(auditRegistry, agent.agentId, event);
+                }
+                catch (error) {
+                    log(`inbox audit target 未持久化: ${error.message}`);
                 }
                 if (append.status === "duplicate_consumed")
                     return null;
@@ -1345,6 +1351,7 @@ function createHostShell({ env = process.env, runtimeHost, channelPackage, event
             eventSourceStartTimer = null;
             await Promise.resolve(eventSourceStop());
             reminder.stopSync();
+            inboxAudit.stop();
             interaction.stopSync();
             await runtimeHost.shutdown(reason);
         })();
@@ -1559,6 +1566,7 @@ function createHostShell({ env = process.env, runtimeHost, channelPackage, event
                     sessionId: agentStates.get(agent.agentId)?.state.sessions[agent.runtime] || null,
                 })));
                 reminder.startSync();
+                inboxAudit.start();
                 interaction.startSync();
                 eventSourceStartTimer = setTimeout(() => { eventSourceStartTimer = null; startEventSource(); }, eventSourceStartDelayMs);
             }

package/dist/feishu/host-shell.mjs

@@ -11,7 +11,8 @@ import { HostEnvelopeProjector, HostStateProjection, SenderIdentityCache, projec
 import { ProcessingEyeOrchestrator } from "./host-processing-eye.mjs";
 import { projectInboxEnvelope, targetKeyOfInboxEnvelope } from "../agent/inbox-projection.mjs";
 import { HostReminderOrchestrator } from "../agent/host-reminder-orchestrator.mjs";
-import { persistInboundScanTarget } from "../agent/missed-outbound-scan.mjs";
+import { InboxAuditHeartbeat } from "../agent/inbox-audit-heartbeat.mjs";
+import { inboxAuditRegistryFile, observeInboxAuditTarget } from "../agent/missed-outbound-scan.mjs";
 import { HostChannelBusiness } from "./host-channel-business.mjs";
 import { HostInteractionOrchestrator } from "./interaction-orchestrator.mjs";
 import { targetFor } from "./message-policy.mjs";
@@ -300,6 +301,13 @@ export function createHostShell({ env = process.env, runtimeHost, channelPackage
     for (const agent of agents)
         prepareAgentState(agent);
     const reminder = new HostReminderOrchestrator({ agents, stateStore, envelopeProjector, deliveryTarget: runtimeHost, log });
+    const inboxAudit = new InboxAuditHeartbeat({
+        agents,
+        stateStore,
+        runtimeHost,
+        log,
+    });
+    const auditRegistry = inboxAuditRegistryFile(larkinHome);
     const seenEventIds = new Set();
     const inFlightEventIds = new Set();
     const onFeishuMessage = async (agent, event, options) => {
@@ -346,13 +354,11 @@ export function createHostShell({ env = process.env, runtimeHost, channelPackage
                 // append/dedupe decision is durable. Agent model-seen state is untouched.
                 if (event.event_id)
                     seenEventIds.add(eventKey);
-                if (!event._sender_is_bot && event._scan_authority) {
-                    try {
-                        persistInboundScanTarget(agent.stateDir, event, agent.agentId);
-                    }
-                    catch (error) {
-                        log(`inbound scan target 未持久化: ${error.message}`);
-                    }
+                try {
+                    observeInboxAuditTarget(auditRegistry, agent.agentId, event);
+                }
+                catch (error) {
+                    log(`inbox audit target 未持久化: ${error.message}`);
                 }
                 if (append.status === "duplicate_consumed")
                     return null;
@@ -1305,6 +1311,7 @@ export function createHostShell({ env = process.env, runtimeHost, channelPackage
             eventSourceStartTimer = null;
             await Promise.resolve(eventSourceStop());
             reminder.stopSync();
+            inboxAudit.stop();
             interaction.stopSync();
             await runtimeHost.shutdown(reason);
         })();
@@ -1519,6 +1526,7 @@ export function createHostShell({ env = process.env, runtimeHost, channelPackage
                     sessionId: agentStates.get(agent.agentId)?.state.sessions[agent.runtime] || null,
                 })));
                 reminder.startSync();
+                inboxAudit.start();
                 interaction.startSync();
                 eventSourceStartTimer = setTimeout(() => { eventSourceStartTimer = null; startEventSource(); }, eventSourceStartDelayMs);
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "larkin",
-  "version": "0.4.21",
+  "version": "0.4.22",
   "private": false,
   "larkinPackageRole": "npm-published",
   "files": [